Digital Content
Subscribe to this community
GDPR: What's your justification?
[Updated Oct.19 to add EDPB on Necessary for Contract and ICO on Consent][Updated Sep.18 t...
Choose the right metaphor
I've been reading a fascinating paper by Julia Slupska – "War, Health and E...
How Should Education use AI?
In looking at the many ethical concerns that have been expressed about the use of Artificial Intelligence in education, it struck me that most fall at the two ends of a scale. On the one hand questions of human autonomy lead to concerns about cookie-cutter approaches, where AI treats every student according to a rigid formula; on the other hand questions about the social functi...
Remote Proctoring and Invigilation
[with thanks to a former university Head of Examinations for input and discussion]Recent years, and weeks, have seen a move away from the traditional examination context, where candidates gather in large halls to write on paper, to candidates being assessed using computers, in small groups or individual work spaces. In this change, the role of the invigilator (also known as &qu...
Wellbeing Analytics Code of Practice: Co...
[UPDATE: thanks for your feedback. Final text has now gone into the Jisc production process :)]Jisc has been providing expert, trusted advice on digital technology in the education sector for more than 30 years. We know that technology...
Free Text and Data Protection
Collections of free text – whether in database fields, documents or email archives – present a challenge both for operations and under data protection law. They may contain personal data but it's hard to find: whether y...
What's the data protection difference be...
[UPDATE] a slightly revised version of this post formed our response to the ICO consultati...
Should we just log everything?
In a world where data storage is almost unlimited and algorithms promise to interrogate data to answer any question, it's tempting for security teams to simply follow a "log everything, for ever" approach. At this week...
Consultation: Assessing the impact of (r...
Our university and college buildings already contain a surprising number of sensors that c...
Data, Flows and Benefits
[A second post arising out of excellent discussions at the DALTAí project seminar in Dubl...
GDPR: Backups, Archives and the Right to...
I was recently asked how the GDPR's Right to Erasure would affect backups and archives...
AI and Ethics: GDPR and beyond
The EU High-Level Expert Group's (HLEG) draft Ethics Guidelines for Trustworthy AI con...
Adaptability, Openness and Curiosity
If Education 4.0 is about preparing students for the workplace of the future, that's g...
GDPR: Official CSIRTs?
A couple of organisations have asked me recently whether the General Data Protection Regulation (GDPR) requires them to get some sort of external recognition of their incident response team. Here's why I don't think it does.Recital 49 of the Regulation says:The processing of personal data to the extent strictly necessary and proportionate for the purposes of ensuring ne...
Federated Access Management and the GDPR
[this article is based on the draft text published by the European Council on 28th January 2016. Recital and article numbers, at least, will change before the final text]When individuals register to access a website or other on-line se...
GDPR: Wifi access
Many, perhaps most, wifi access services want to perform some sort of authentication of people who use them (for those providing connectivity via Janet, it's a requirement of the Eligibility Policy). Since authentication involves s...
DPIAs: First Attempts
Article 35 of the General Data Protection Regulation introduces a requirement to conduct a...
Janet Training Courses in August
You might be interested to know that Janet training are running the following courses during August. Using Free Network Tools28, 30 July, 1, 8, 15 & 20 August – Live Online CourseOver 6 sessions, this online course cover...
Wellbeing analytics: legal explorations
While colleagues are looking at whether data can be used to pick up early signs of mental health and wellbeing problems, I'm exploring possible legal frameworks for doing that safely. As the diagram shows, trying to deliver an earl...
GDPR: Twelve Steps, Sorted
Although the Information Commissioner's "Twelve Steps to Prepare" is an exce...
Latest activity
JiscCommunity has been this blog's home for eight years, but I'm now moving over to JiscInform. That has many nice features, notably that it works really well on...
[UPDATE: thanks for your feedback. Final text has now gone into the Jisc production process :)]
Jisc has been providing expert, trusted advice on digital...
[with thanks to a former university Head of Examinations for input and discussion]
Recent years, and weeks, have seen a move away from the traditional...
I've been reading a fascinating paper by Julia Slupska – "War, Health and...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
The EU High-Level Expert Group's (HLEG) draft Ethics Guidelines for...
Service report for organisations in Yorkshire Humberside connected to the Janet network
